** Description changed:
+ SRU Justification:
+
+ Impact:
+
+ A NULL pointer dereferrence will occur when a user adds an IPVS service.
+ This occurs since kernel 3.8.0-28.41 (Raring), after commit:
+
+ dc7b3eb ipvs: Fix reuse connection if real server is dead
+
+ The NULL pointer occurs when accessing the ipvs variable in line 1658:
+
+ 1658 if (unlikely(sysctl_expire_nodest_conn(ipvs)) && cp && cp->dest &&
+ 1659 unlikely(!atomic_read(&cp->dest->weight)) && !iph.fragoffs &&
+ 1660 is_new_conn(skb, &iph)) {
+ 1661 ip_vs_conn_expire_now(cp);
+ 1662 __ip_vs_conn_put(cp);
+ 1663 cp = NULL;
+ 1664 }
+
+ Mainline kernel has this variable initialised earlier, with commit:
+
+ 0c12582 ipvs: add backup_only flag to avoid loops
+
+ Fix:
+
+ Apply commit 0c12582 "ipvs: add backup_only flag to avoid loops" fix the
+ problem. Bug reporter has claimed success with a test kernel that
+ contains this commit.
+
+ Testcase:
+
+ Simply running the command:
+
+ sudo ipvsadm -A -u 10.0.50.4:53
+
+ Will trigger the bug.
+
+ ---
+
In kernel 3.8.0-29 and higher (I've tested 3.8.0-30 and 3.8.0-31), the
kernel panics when adding IPVS service. Specifically, when I execute the
following command:
- sudo ipvsadm -A -u 10.0.50.4:53
+ sudo ipvsadm -A -u 10.0.50.4:53
The kernel immediately panics. I've reverted the kernel to 3.8.0-27, and
IPVS executes without a problem.
The panic is completely reproducable, using a clean install, no extra
packages installed, all packages upgraded.
I've attached the apport report of the system running 3.8.0-29.
Best,
Luc van Donkersgoed
- ---
+ ---
AlsaDevices:
- total 0
- crw-rw---T 1 root audio 116, 1 Oct 11 10:04 seq
- crw-rw---T 1 root audio 116, 33 Oct 11 10:04 timer
+ total 0
+ crw-rw---T 1 root audio 116, 1 Oct 11 10:04 seq
+ crw-rw---T 1 root audio 116, 33 Oct 11 10:04 timer
AplayDevices: Error: [Errno 2] No such file or directory
ApportVersion: 2.9.2-0ubuntu8.3
Architecture: amd64
ArecordDevices: Error: [Errno 2] No such file or directory
AudioDevicesInUse: Error: command ['fuser', '-v', '/dev/snd/seq',
'/dev/snd/timer'] failed with exit code 1:
CRDA: Error: [Errno 2] No such file or directory
DistroRelease: Ubuntu 13.04
HibernationDevice: RESUME=UUID=566497ef-0abf-42f0-85ee-988bf9ba2034
InstallationDate: Installed on 2012-12-03 (311 days ago)
InstallationMedia: Ubuntu-Server 12.04 LTS "Precise Pangolin" - Release amd64
(20120424.1)
IwConfig:
- eth0 no wireless extensions.
-
- lo no wireless extensions.
+ eth0 no wireless extensions.
+
+ lo no wireless extensions.
Lsusb: Error: command ['lsusb'] failed with exit code 1: unable to initialize
libusb: -99
MachineType: VMware, Inc. VMware Virtual Platform
MarkForUpload: True
Package: linux (not installed)
PciMultimedia:
-
+
ProcFB:
-
+
ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz-3.8.0-31-generic
root=/dev/mapper/dnslb01-root ro
ProcVersionSignature: Ubuntu 3.8.0-31.46-generic 3.8.13.8
RelatedPackageVersions:
- linux-restricted-modules-3.8.0-31-generic N/A
- linux-backports-modules-3.8.0-31-generic N/A
- linux-firmware 1.106
+ linux-restricted-modules-3.8.0-31-generic N/A
+ linux-backports-modules-3.8.0-31-generic N/A
+ linux-firmware 1.106
RfKill: Error: [Errno 2] No such file or directory
Tags: raring
Uname: Linux 3.8.0-31-generic x86_64
UpgradeStatus: Upgraded to raring on 2013-10-10 (0 days ago)
UserGroups: adm cdrom dip lpadmin plugdev sambashare sudo
dmi.bios.date: 06/22/2012
dmi.bios.vendor: Phoenix Technologies LTD
dmi.bios.version: 6.00
dmi.board.name: 440BX Desktop Reference Platform
dmi.board.vendor: Intel Corporation
dmi.board.version: None
dmi.chassis.asset.tag: No Asset Tag
dmi.chassis.type: 1
dmi.chassis.vendor: No Enclosure
dmi.chassis.version: N/A
dmi.modalias:
dmi:bvnPhoenixTechnologiesLTD:bvr6.00:bd06/22/2012:svnVMware,Inc.:pnVMwareVirtualPlatform:pvrNone:rvnIntelCorporation:rn440BXDesktopReferencePlatform:rvrNone:cvnNoEnclosure:ct1:cvrN/A:
dmi.product.name: VMware Virtual Platform
dmi.product.version: None
dmi.sys.vendor: VMware, Inc.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1238494
Title:
Kernel panic on 3.8.0-29 when using ipvs
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1238494/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
